Lead DevSecOps Engineer (AI)

Location: United Kingdom; flexible hybrid and remote options are available, with occasional travel to client sites or hirify.global offices.

Company

hirify.global is an AI-native consulting partner building digital products, services, AI solutions, and security practices for clients including PayPal, adidas, NatWest, FanDuel, and Money Saving Expert.

What you will do

• Own cloud security posture across client engagements, designing AWS and Azure controls with Terraform and driving continuous CSPM improvements.
• Establish application security frameworks, secure development policies, and AppSec maturity models; perform architecture and code reviews.
• Deliver infrastructure and application penetration testing, automated cloud scanning, threat modelling, and actionable remediation guidance.
• Build AI-powered security tooling and platforms using Claude Code, StrandsAgent, AWS AgentCore, and related technologies.
• Analyze GDPR, GLI, PCI DSS, and other regulatory requirements; present risks and remediation roadmaps to senior stakeholders.
• Strengthen internal security standards, mentor and onboard DevSecOps engineers, and coach development teams.

Requirements

• Proven experience in a Lead or Principal DevSecOps or Application Security engineering role.
• Experience in iGaming, lottery, finance, banking, or another highly regulated digital sector.
• Experience with regulated environments and requirements including GDPR, GLI, PCI DSS, or CFTC.
• Experience with CI/CD and infrastructure as code, including GitHub Actions and Terraform.
• Hands-on AWS and Azure security experience, including Entra ID, PIM, CAP, Defender, and Policy.
• Deep knowledge of OWASP frameworks, secure SDLC, application security assessment, secure code review, and architecture review.
• Experience conducting or coordinating penetration testing and threat modelling.
• Familiarity with infosec functions including GRC, TPRM, and SOC capabilities.
• Strong communication skills with the ability to influence senior stakeholders.

Nice to have

• Experience building AI-powered security tooling with Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks.
• Previous experience as a developer, DevOps engineer, or cloud engineer within the SDLC.
• Azure AZ-500, SC-100, or SC-200 certification.
• AWS Security Specialty or Solutions Architect certification.

Culture & Benefits

• Flexible working with hybrid and remote options.
• Office hubs in Edinburgh, Leeds, Manchester, London, and Bulgaria, with occasional travel when needed.
• Autonomy to balance collaboration, client time, and focused work.
• Supportive culture with investment in professional and personal growth.
• Inclusive workplace with support and adjustments available during the application process.

Hiring process

• Talent Acquisition Team call.
• Role-specific capability interview.
• Depending on the role, a short presentation, practical or technical task, or values-focused conversation may also be required.